Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91877A6/BDEE7B885C7E11F0A5C36036C4F9AE02/o_EASaOTr53KRFlmZBZrh0Avgio.mft
File:                     o_EASaOTr53KRFlmZBZrh0Avgio.mft (raw, json)
Hash identifier:          R+Z/0llM0OLYAC1+eFDPg17ATFXjawNEfpNvhCkQJ0Y=
Subject key identifier:   B9:6E:B1:10:97:41:3A:F5:1F:F9:55:E8:69:C2:87:A5:5C:CB:9E:14
Authority key identifier: A3:F1:00:49:A3:93:AF:9D:CA:44:59:66:64:16:6B:87:40:2F:82:2A
Certificate issuer:       /CN=A91877A6/serialNumber=A3F10049A393AF9DCA44596664166B87402F822A
Certificate serial:       EA
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o_EASaOTr53KRFlmZBZrh0Avgio.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91877A6/BDEE7B885C7E11F0A5C36036C4F9AE02/o_EASaOTr53KRFlmZBZrh0Avgio.mft
Manifest number:          E6
Signing time:             Mon 21 Sep 2026 06:29:29 +0000
Manifest this update:     Mon 21 Sep 2026 06:29:28 +0000
Manifest next update:     Mon 28 Sep 2026 06:29:28 +0000
Files and hashes:         1: o_EASaOTr53KRFlmZBZrh0Avgio.crl (hash: TAzUWqAnxVV6v07qYFiu9KfHjXBXMKPf0DNvhCPM68c=)
                          2: 4DC60A785C7F11F089D20138C4F9AE02.roa (hash: fH+Os/s7SYYFE9B1LFr1LyTEBlLJ9szkGGwcIpwvf+8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91877A6/BDEE7B885C7E11F0A5C36036C4F9AE02/o_EASaOTr53KRFlmZBZrh0Avgio.crl
                          rsync://rpki.apnic.net/member_repository/A91877A6/BDEE7B885C7E11F0A5C36036C4F9AE02/o_EASaOTr53KRFlmZBZrh0Avgio.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o_EASaOTr53KRFlmZBZrh0Avgio.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 06:29:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 234 (0xea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91877A6, serialNumber=A3F10049A393AF9DCA44596664166B87402F822A
        Validity
            Not Before: Sep 21 06:29:28 2026 GMT
            Not After : Sep 28 06:29:28 2026 GMT
        Subject: CN=6ab0cec9-a8e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:2d:b2:42:0c:8b:d9:60:64:af:bd:1d:a2:87:
                    0d:21:92:ce:8d:fb:47:49:a4:f5:ae:5a:19:a3:3b:
                    62:71:ed:a5:95:65:c9:ac:5f:fd:66:bd:d5:78:1a:
                    81:98:68:a6:21:20:c1:d4:a0:67:6d:2c:2f:e9:74:
                    bc:17:82:d9:49:22:6d:99:34:ec:19:5f:c7:93:e9:
                    f4:77:ed:bf:88:8c:55:f3:75:c1:bc:48:af:78:ae:
                    fe:60:20:61:56:b5:9d:82:fe:cd:0d:fe:96:5f:62:
                    c0:f4:46:de:59:7c:e4:19:7d:6b:b1:b9:1c:8e:a1:
                    09:98:8d:7b:4e:79:64:6b:fb:c8:50:94:e8:98:4b:
                    64:05:b5:31:24:a3:73:f8:e0:bb:e3:cd:0d:de:63:
                    88:4c:f3:54:09:9a:f0:8e:7e:74:17:92:84:22:b1:
                    d3:68:2d:50:cd:da:51:f8:b7:cf:fd:5d:11:b2:be:
                    16:5b:32:f1:38:ec:29:05:47:e4:6c:cc:b2:81:10:
                    fc:d4:91:78:10:e9:00:43:e1:cc:12:f4:bd:e7:d3:
                    ca:59:65:d2:0b:4a:64:db:d6:2e:69:8f:38:76:58:
                    ba:d3:dd:9b:85:00:7a:0c:2c:9b:67:31:e7:31:3f:
                    66:26:e9:61:14:4d:62:63:1f:fe:f6:05:8e:bd:4c:
                    c3:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:6E:B1:10:97:41:3A:F5:1F:F9:55:E8:69:C2:87:A5:5C:CB:9E:14
            X509v3 Authority Key Identifier:
                keyid:A3:F1:00:49:A3:93:AF:9D:CA:44:59:66:64:16:6B:87:40:2F:82:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91877A6/BDEE7B885C7E11F0A5C36036C4F9AE02/o_EASaOTr53KRFlmZBZrh0Avgio.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o_EASaOTr53KRFlmZBZrh0Avgio.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91877A6/BDEE7B885C7E11F0A5C36036C4F9AE02/o_EASaOTr53KRFlmZBZrh0Avgio.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:b5:dd:f3:3b:00:ab:8b:7c:8b:30:1e:a3:96:17:19:39:dd:
         aa:48:20:fc:81:93:ac:44:9e:86:5f:da:f4:fa:59:76:20:c6:
         86:df:d1:0c:b0:49:3b:b7:09:16:7f:39:fb:96:e6:a6:ed:60:
         fa:c6:9b:db:c1:5c:65:eb:f7:cf:7b:18:5d:7d:12:e9:45:8c:
         bf:c3:fb:df:36:c9:ba:9b:7f:e7:61:74:27:47:02:1b:d7:4d:
         fc:41:85:f8:94:59:62:c5:86:76:7d:e6:07:4b:d2:a9:dc:39:
         a6:7e:af:e5:7c:a4:84:7a:a9:5b:b7:a4:8e:65:36:e6:61:7e:
         62:e7:c2:f4:5e:11:8e:3d:57:84:2e:e0:33:b7:45:4a:e4:3c:
         f2:f4:6f:f2:a1:a6:06:14:60:ab:09:de:77:c4:3c:a3:e6:8f:
         61:a2:49:83:ac:13:75:d5:05:fc:5a:c8:a1:1e:bd:e2:fe:d2:
         ac:de:9e:6d:49:1d:12:f8:0c:0f:82:5d:b2:4c:cf:d4:93:fc:
         c1:65:4d:88:93:77:16:27:82:46:d9:d2:bc:29:ef:f7:2e:eb:
         df:f5:bb:61:27:e4:b5:df:5d:5d:1b:86:98:a0:ca:2a:4a:57:
         6f:df:20:e7:56:9a:a0:b7:bd:6a:d6:f1:27:47:37:ae:df:63:
         55:4f:3d:00
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAOowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODc3QTYxMTAvBgNVBAUTKEEzRjEwMDQ5QTM5M0FGOURDQTQ0NTk2NjY0MTY2Qjg3
NDAyRjgyMkEwHhcNMjYwOTIxMDYyOTI4WhcNMjYwOTI4MDYyOTI4WjAYMRYwFAYD
VQQDEw02YWIwY2VjOS1hOGU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmS2yQgyL2WBkr70doocNIZLOjftHSaT1rloZoztice2llWXJrF/9Zr3VeBqB
mGimISDB1KBnbSwv6XS8F4LZSSJtmTTsGV/Hk+n0d+2/iIxV83XBvEiveK7+YCBh
VrWdgv7NDf6WX2LA9EbeWXzkGX1rsbkcjqEJmI17Tnlka/vIUJTomEtkBbUxJKNz
+OC7480N3mOITPNUCZrwjn50F5KEIrHTaC1QzdpR+LfP/V0Rsr4WWzLxOOwpBUfk
bMyygRD81JF4EOkAQ+HMEvS959PKWWXSC0pk29YuaY84dli6092bhQB6DCybZzHn
MT9mJulhFE1iYx/+9gWOvUzDTwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLlusRCX
QTr1H/lV6GnCh6Vcy54UMB8GA1UdIwQYMBaAFKPxAEmjk6+dykRZZmQWa4dAL4Iq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzdBNi9CREVFN0I4ODVD
N0UxMUYwQTVDMzYwMzZDNEY5QUUwMi9vX0VBU2FPVHI1M0tSRmxtWkJacmgwQXZn
aW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL29fRUFTYU9UcjUzS1JGbG1aQlpyaDBBdmdpby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NzdBNi9CREVFN0I4ODVDN0UxMUYwQTVDMzYwMzZDNEY5QUUwMi9vX0VBU2FPVHI1
M0tSRmxtWkJacmgwQXZnaW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAWLXd8zsAq4t8izAeo5YXGTndqkgg/IGTrESehl/a9PpZdiDGht/RDLBJO7cJ
Fn85+5bmpu1g+sab28FcZev3z3sYXX0S6UWMv8P73zbJupt/52F0J0cCG9dN/EGF
+JRZYsWGdn3mB0vSqdw5pn6v5XykhHqpW7ekjmU25mF+YufC9F4Rjj1XhC7gM7dF
SuQ88vRv8qGmBhRgqwned8Q8o+aPYaJJg6wTddUF/FrIoR694v7SrN6ebUkdEvgM
D4JdskzP1JP8wWVNiJN3FieCRtnSvCnv9y7r3/W7YSfktd9dXRuGmKDKKkpXb98g
51aaoLe9atbxJ0c3rt9jVU89AA==
-----END CERTIFICATE-----
Generated at Tue Sep 22 01:25:23 2026 by rpki-client